PostgreSQL is one of the most commonly used open source database management systems. This paper describes weaknesses in the PostgreSQL configuration that may be abused for privilege escalation, as well as remote command execution and the uploading of arbitrary files to the system.

• Having_Fun_With_PostgreSQL.txt
• Having_Fun_With_PostgreSQL.pdf

This shell script will connect to multiple hosts, mount the C$ share and then find and copy interesting files from the system. By default, it will find file that contain the string passw. The script is able to work parallel on multiple hosts.

• smbsc.sh